Allow users to change their passphrase

Should be `return cb(emailPlugin.errors.INTERNAL_ERROR)` right?